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(54) INTERNET ACCESS SYSTEM AND METHOD USING ACCESS SERVER 

(57)Abstract: 

PROBLEM TO BE SOLVED: To reduce installation 
investment by simplifying a dialup Internet access so 
as to allow a plurality of providers to share an access 
server in common. 

SOLUTION: When an outgoing subscriber terminal 
131 dials a dialup access number, a relay exchange 
system 11 translates the dialup access number and 
the translated number reaches an IAT 22. After PPP 
termination, a corresponding ISP is recognized from a 
user same (domain name) of the outgoing subscriber 
terminal 131 and a password, and an address of an authentication server of the ISP 
acquired. After the end of authentication, an IP address of the outgoing subscriber 
terminal, an IP address of an access router and an IP address of a DNS server are 
acquired from user data of each ISP stored in a proxy server 28 to attain access to the 
ISP. Thus, using one dialup number can access a plurality of providers. 

* NOTICES * 

JPO and INPIT are not responsible for any 
damages caused by the use of this translation. 

I.This document has been translated by computer. So the translation may not reflect the 
original precisely. 
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2.**** shows the word which can not be translated. 
3Jn the drawings, any words are not translated. 



CLAIMS 



[Claim(s)] 

[Claim 1]In an Internet access method using an access server provided with the Internet 
access trunk which remote accesses an Internet Service Provider, An Internet access 
method using an access server, wherein said Internet access trunk has an accessing 
means which accesses two or more Internet Service Providers by a unified dialup number. 
[Claim 2]Said accessing means, It installs in an access point. A certain proxy server. Use 
and an Internet Service Provider's service. An Internet access method using the access 
server according to claim 1 discriminating said Internet access service provider from a 
user name (domain name) of ************ and a password which have won popularity. 
[Claim 3]Said accessing means, It installs in an access point. A certain proxy server. Use 
and an Internet Service Provider's service. An Internet access method using a claim 1 
written access server discriminating an authentication server of an Internet Service 
Provider who checks user authentication from a user name (domain name) of 
************ a nd a password which have won popularity. 

[Claim 4]Said accessing means, An IP address of a router connected to said Internet 
Service Provider from system data which carried out internal organs to said proxy server, 
an IP address of an applicable Internet Service Provider's DNS server, and an IP address 
of ************ Acquiring claims 1 and 2 or an Internet access method using an access 
server given in three. 

[Claim 5]It is an Internet accessing method using an access server provided with the 
Internet access trunk which remote accesses an Internet Service Provider, An Internet 
accessing method using an access server, wherein said Internet access trunk accesses 
two or more Internet Service Providers by a unified dialup number. 
[Claim 6]It is an Internet accessing method using an access server provided with the 
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Internet access trunk which remote accesses an Internet Service Provider, A proxy 
server is used for said Internet access trunk, If an IP address of an authentication server 
which checks user authentication from a domain name to an authentication demand sent 
from ************ is acquired, said authentication server is accessed, attestation is 
performed and attestation is successful, If an attestation Acknowledgement is replied to 
the aforementioned from subscriber terminal, and an IP address assignment request 
comes from said subscriber terminal after replying an attestation Acknowledgement to 
the aforementioned from subscriber terminal, An Internet accessing method using an 
access server acquiring an IP address assigned to a subscriber terminal and an IP 
address of an Internet Service Provider's DNS, and assigning said Internet Service 
Provider's IP address. 



[Translation done.] 
* NOTICES * 

JPO and INPIT are not responsible for any 
damages caused by the use of this translation. 

1. This document has been translated by computer. So the translation may not reflect the 
original precisely. 

2. **** shows the word which can not be translated. 
3. In the drawings, any words are not translated. 



DETAILED DESCRIPTION 



[Detailed Description of the Invention] 
[0001] 

[Field of the Invention]This invention about the method and method of an Internet 
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access system, It is related with the Internet access method and method using the share 
access server in a function of a remote access server of the relay exchange which has 
the Internet access trunk (it is called Internet Access TrunkrIAT) especially, or a member 
exchange system. 
[0002] 

[Description of the Prior Art]Generally one or more dialup numbers are assigned to one 
ISP (Internet Service Provider: abbreviated may be carried out and it may be called a 
provider an Internet Service Provider and henceforth). One or more IAT(s) are assigned 
for every dialup number of this. That is, the IAT group is assigned for every ISP. 
Therefore, the remote access (RAS is called henceforth) function which IAT holds is 
mounted for every ISP. When ******** tends to connect with a certain ISP, it is 
necessary to turn an applicable dialup number. In relay or a mail arrival exchange system, 
IAT which has an RAS function translates this connected line identification, and 
connects it to IAT according to routing table. IAT is connected to the authentication 
server of ISP applicable with reference to the system data after a PPP (Point to Point 
Protocol) termination and in IAT. ISP assigns an IP address (IP:InternetProtocol) to 
******** after the end of attestation. When ******** tends to connect with other ISP, 
******** turns another dialup number and receives a message in another IAT in relay or 
a mail arrival exchange system. 
[0003] 

[Problem(s) to be Solved by the Invention]Therefore, since IAT is divided and installed 
for every ISP, and also IAT is connected to the access router in an access point via LAN 
and it is connected to the router of ISP via WAN, it is necessary to prepare an access 
router for every ISP. That is, since sharing of IAT or RAS is not carried out in this way, 
it is a burden with big plant-and-equipment investment also for ISP also for the career, 
and there is a problem of not having led to reduction at the Internet access charge. 
[0004]The purpose of this invention is to measure improvement in reduction of efficient 
employment of IAT, and plant-and-equipment investment, and member service by 
sharing one IAT between two or more providers. 
[0005] 
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[Means for Solving the Problem]In order to attain the above-mentioned purpose, an 
Internet access method of this invention, In an Internet access method using an access 
server provided with the Internet access trunk which remote accesses an Internet 
Service Provider, Said Internet access trunk is characterized by having an accessing 
means which accesses two or more Internet Service Providers by a unified dialup number. 
[0006]Said accessing means, It is characterized by discriminating said Internet access 
service provider from a user name (domain name) of ************ and a password 
which have received an Internet Service Provider's service using a proxy server 
currently installed in an access point. 

[0007]Said accessing means, It installs in an access point. It is characterized by 
discriminating an authentication server of an Internet Service Provider who checks user 
authentication from a user name (domain name) of ************ and a password which 
have received an Internet Service Provider's service using a certain proxy server. 
[0008]Said accessing means, An IP address of a router connected to said Internet 
Service Provider from system data which carried out internal organs to said proxy server, 
an IP address of an applicable Internet Service Provider's DNS server, and an IP address 
of ************. It is characterized by acquiring. 

[0009]The 1st Internet accessing method of this invention, It is an Internet accessing 
method using an access server provided with the Internet access trunk which remote 
accesses an Internet Service Provider, Said Internet access trunk is characterized by 
accessing two or more Internet Service Providers by a unified dialup number. 
[0010]The 2nd Internet accessing method of this invention, It is an Internet accessing 
method using an access server provided with the Internet access trunk which remote 
accesses an Internet Service Provider, A proxy server is used for said Internet access 
trunk, If an IP address of an authentication server which checks user authentication from 
a domain name to an authentication demand sent from ************ is acquired, said 
authentication server is accessed, attestation is performed and attestation is successful, 
If an attestation Acknowledgement is replied to the aforementioned from subscriber 
terminal, and an IP address assignment request comes from said subscriber terminal 
after replying an attestation Acknowledgement to the aforementioned from subscriber 
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terminal, An IP address assigned to a subscriber terminal and an IP address of an 
Internet Service Provider's DNS are acquired, and it is characterized by assigning said 
Internet Service Provider's IP address. 
[0011] 

[Embodiment of the InventioiijNext, with reference to drawings, the embodiment of the 
Internet access system concerning this invention is described. Drawing 1 is shown and 
the member exchange system which has IAT to which this invention is applied PSTN 
network 101 (PHSrPIan Old Telephone Network), PHS network 102 (PHS:Personal Handy 
Phone System), ISDN network 103 (Integrated Service Digital Network), The relay 
exchange system 1 1 and the IAT module 12 (IAT:Internet AccessTrunk) which has two or 
more Internet access trunks (IAT) connected to the relay exchange system 11, HUB 15 
which is concentrating the output line (10BASE-T) from two or more IAT(s), The router 
161,162 which processes routing (channel control), The proxy server 28 which is an 
access server, and the ISP1 provider 18 who offers service of the Internet, The ISP1 
authentication server 181 of the ISP2 provider 19 who serves the Internet, and the ISP1 
provider 18 who performs user authentication (check of a password etc.), The ISP2 
authentication server 191 of the ISP2 provider 19 who performs user authentication 
(check of a password etc.), The relay data network 1 7 which connects the router 161,162, 
router 161, and ISP1 provider 18 and the ISP2 provider 19, It comprises the ISP1 
terminal 131,132 a contract of is made with the ISP1 provider 18, and the ISP2 
subscriber terminal 133 a contract of is made with the ISP2 provider 19. 
[0012]In drawing 1 , the access point contains the relay exchange system 11, the IAT 
module 12, HUB15, the router 161,162, and the proxy server 28. PSTN network 101 is a 
communications network which connects the ISP1 subscriber terminal 131 and the relay 
exchange system 11, PHS network 102 is a communications network which connects the 
ISP1 subscriber terminal 1 32 and the relay exchange system 1 1 , and ISDN network 1 03 is 
a communications network which connects the ISP2 subscriber terminal 133 and the 
relay exchange system 11. Two or more subscriber terminals a contract of was made 
with two or more different ISP may be connected to each communications network. In 
drawing 1 , on account of explanation, although it was considered as two sets, there may 
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be more than it. 

[0013]IATM12 comprises two or more IAT22, namely, comprises IAT22-1.22-2 22-n. 

[0014]When the member who owns the ISP1 subscriber terminal 131 if drawing 1 is 
referred to dials a dialup number (telephone number of the common access point of the 
ISP1 provider 18 and the ISP2 provider 19), by the termination analysis of the relay 
exchange system 11. Although IAT22 to connect will be determined, if there is an empty 
channel which can connect then, it will connect with IAT22 equivalent to the channel. A 
message is received from two or more members in IAT22 [ vacant using the Marti hunting 
method (the dial-up number in this case is the pilot number with two or more circuits, 
and chooses one of two or more circuits) of an exchange system by the same dialup 
number ]. Even if it is further two or more providers, by assigning the same dialup number, 
a message is received in IAT22 [ vacant by the same number ]. Thus, saving or 
concentration of number resources can be aimed at by unifying a dialup number. 
[0015]The PPP (Point to Point Protocol) termination of the call origination from a 
member's terminal is carried out to IAT22 through the modem which has carried out 
internal organs. Then, IAT22 connects office LAN to the proxy server 28 currently 
installed in the access point for attestation (check of the password entered from the 
member's terminal) of ******** by course. 

[0016]At this time, an authentication demand is performed with the proxy server 28 to 
ISP which recognizes corresponding ISP and corresponds. After completing attestation, 
the proxy server 28 acquires the IP address of ********, the IP address of the DNS 
server of ISP, and the IP address of an access router (router 161), and replies them to 

**5fc**9j(** ^ 

[001 7]Reference of drawing 2 expresses the functional constitution figure of each IAT in 
IATM12. namely, the drawing 2 **** — IAT22 comprises the modem 221 and the IAT 
control section 222 which operates by programmed control by the processor which is not 
illustrated. The IAT control section 222 comprises the PPP termination function part 223 
and the IP address analyzor 224. 

[0018]In drawing 2 , the proxy server 28 comprises the server controlling part 281 which 
operates by programmed control by the processor which is not illustrated, and the 
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storage parts store 282 which read-out and writing are made and stores system data. 
The storage parts store in this case may be a memory (for example, volatile memory, 
such as nonvolatile memory, such as a flash memory, and RAM), or may be recording 
media, such as a magnetic disk. System data including provider ID table 283, the 
data-address table 284, the attestation server address table 285, and two or more 
provider tables 286 are stored in the storage parts store 282. There is the provider table 
286 for every provider, and in the provider table 286. The area of the default GW address 
table which stores the IP address (GW: gateway) of the default GW, It comprises area of 
the DNS address which stores the IP address of the DNS server (DNS:Distributed Name 
Service) of applicable ISP, and area of the member IP address pool which stores the IP 
address of the terminal of two or more 

[001 9]Although some providers may have two or more sub-domains, In that case, area of 
a member IP address pool is consisted of by the provider table 286 for every area of a 
DNS address, and ISP for every ISP with the area of a default GW address table for every 
ISP. 

[0020]The IAT control section 222 is provided with the transmission and reception 
circuit which is not illustrating for performing transmission and reception with the relay 
exchange system 11 through the modem 221, and the transmission and reception circuit 
which is not illustrating for performing transmission and reception with HUB15. The 
server controlling part 281 is provided with the transmission and reception circuit which 
is not illustrating for performing transmission and reception with the router 162. 
[0021]Next, the outline of operation of this invention is explained with reference to 
drawing 2 . The call origination from a member's terminal (an example ISP1 subscriber 
terminal or ISP2 subscriber terminal) is connected to the IAT control section 222 via the 
modem 221 which has carried out internal organs to IAT22. Connection with the IAT 
control section 222 from a subscriber terminal is made based on a PPP protocol. The 
PPP termination function part 223 of the IAT control section 222 performs processing 
based on a subscriber terminal and a PPP protocol. PPP (Point-to-PointProtocol) is 
specified by RFC1661 (RFC:Request for Comments), and is standardized by IETF 
(Internet Engineering Task Force). Then, the IAT control section 222 is connected to the 
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proxy server (going via HUB 1 5 and the router 1 62) 28 via office LAN after the IP address 
analysis by the IP address analyzor 224. At this time, the server controlling part 281 of 
the proxy server 28 identifies ISP applicable from the user name (domain name) of ISP 
which ******** makes a contract of. The server controlling part 281 recognizes the 
address of the authentication server of ISP (ISP1 provider or ISP2 provider) applicable 
from the attestation server address area of the provider table 286 stored in the storage 
parts store 282 from the user name (domain name) of ISP. Then, the server controlling 
part 281 sends out an authentication demand to applicable ISP, and performs attestation. 
After attestation is completed, the IAT control section 222 of IAT22 assigns the IP 
address of ************ by communication with the proxy server 28. 
[0022]The IAT control section 222 of IAT22 which acquired the ** side IP address, the IP 
address of a DNS server, and the IP address of the default GW from the proxy server 28 
replies these data to ********, and a user packet transmission demand is urged to it. 
Then, the terminal of ******** sends out a user packet by router 161 course from the IP 
address of the default GW. 

[0023]Next, operation of an embodiment of the invention is explained with reference to 
drawing 1 - drawing 6 . Drawing 3 expresses the sequence of signal processing of IAT22. 
In order that ******** a contract of is made with the ISP1 provider 18 may access the 
Internet via a provider now, Supposing it dials up using the ISP1 subscriber terminal 131, 
a call setup demand will receive a message in IAT22 of the IAT module 12 via PSTN 
network 101 and the relay exchange system 11. Then, the IAT control section 222 which 
received via the modem 221, Communication based on the ISP1 subscriber terminal 131 
and a PPP protocol is performed, and the link (link setting 213 of drawing 2 ) by PPP is 
established the ISP1 subscriber terminal 131, IAT22, and in between (sequences 
301-306 of drawing 3 ). 

[0024]A PPP authentication demand (user ID and a password are added) is sent out from 
the ISP1 subscriber terminal 131 of ******** after the termination of PPP from a 
member (sequence 306). The IAT control section 222 of IAT22 which received the 
authentication demand transmits the authentication demand packet (authentication 
demand 201 of drawing 2 ) of PPP which carried user ID and a password via the IP 
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address part 224 to the proxy server 28 in an access point. In this case, the translation 
table stored in the storage parts store (it is in the IAT module 12) which is not illustrating 
the telephone number of the access point to which the IP address part 224 was applied 
from the ISP1 subscriber terminal 131 side (beforehand) the IP address corresponding 
for every access point telephone number is registered — **** — it uses and the IP 
address of the proxy server 28 is extracted. Using the extracted IP address, the IAT 
control section 222 will create an authentication demand packet, and will transmit to the 
proxy server 28. 

[0025]Then, the server controlling part 281 of the proxy server 28 which received by 
HUB15 and router 162 course, The user name in the field of the authentication demand 
packet (authentication demand 201 of drawing 2 ) sent from IAT22 and the domain name 
of ISP are used, According to IP address search (after-mentioned) of the authentication 
server shown in drawing 4 , the IP address (in this case, IP address of the ISP1 
authentication server 181) of the authentication server of applicable ISP is read 
(sequence 318). The server controlling part 281 sends out an authentication demand 
packet (authentication demand 202 of drawing 2 ) to applicable ISP (ISP1 provider 18) 
according to the IP address of an authentication server (sequence 327). 
[0026]The ISP1 provider 18 will hand an authentication demand packet to the ISP1 
authentication server 181 which the ISP1 provider 18 has, if an authentication demand 
packet comes. The ISP1 authentication server 181 reads the user ID and the password in 
an authentication demand packet, Attestation of whether to be registered based on the 
user ID and password which were read by searching the user ID and the password which 
are registered into the database which is not illustrated for every user at the time of a 
contract is checked, The result is created as an authentication reply packet, and it 
replies to the proxy server 28 by ISP1 provider 18 course, the server controlling part 281 
of the proxy server 28 after completing the attestation from the ISP1 provider 18 ; — an 
authentication reply packet — IAT22 — sending a reply . The IAT control section 222 of 
IAT22 which received the authentication reply packet replies a PPP authentication 
response to the ISP1 subscriber terminal 131 (sequence 328,319,308). 
[0027]Then, the ISP1 subscriber terminal 131 sends an IP address assignment request to 
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IAT22 (sequence 309). If the IAT control section 222 of IAT22 receives an IP address 
quota demand, a quota request packet will be transmitted to the proxy server 28 
(sequence 320). 

[0028]Then, the server controlling part 281 of the proxy server 28, As shown in drawing 
5, according to the structure (after-mentioned) of user-datum search, The IP address of 
the ISP1 subscriber terminal 131 of ********, the IP address of the DNS server of ISP, 
and the IP address of an access router are acquired, and it replies to the ISP1 subscriber 
terminal 131 of ******** (sequence 329,321,310). 

[0029]Next, if the control section 222 of IAT22 sends out the demand of an ISP fee 
collection start to the ISP1 provider 18, the ISP1 provider 18 will reply an ISP fee 
collection start response, and it will begin (sequence 322,323) to calculate the telex rate 
as use of the Internet. 

[0030]On the other hand, the ISP1 subscriber terminal 131 which received the notice of 
IP address assignment will begin the Internet and communication via the ISP1 provider 
18 (sequence 311). If a member terminates the communication to the Internet with the 
ISP1 subscriber terminal 131 and a circuit is cut soon, The link of the ISP1 subscriber 
terminal 131 and IAT22 is cut, the ISP1 provider's 18 accounting is completed, and 
suitcase hunt of IAT22 is canceled (sequences 312, 324, 325, 313, and 314,316,317,315). 
[0031]As mentioned above, although the case where the Internet was accessed from the 
ISP1 subscriber terminal 131 was explained, Also when the Internet is accessed from the 
ISP1 subscriber terminal 132, the point which communicates via PHS network 102 is 
different, but it cannot be overemphasized that operation of IAT22 and the proxy server 
28 is the same. Also when the Internet is accessed from the ISP2 subscriber terminal 
133, as the proxy server 28 was explanation of the above-mentioned operation, It cannot 
be overemphasized that the ISP2 provider 1 9 and the ISP2 authentication server 1 91 are 
chosen, and the ISP2 subscriber terminal 133 communicates with the Internet via the 
ISP2 provider 19. 

[0032]Next, the structure of search of the address of the ISP authentication server of 
drawing 4 is explained. Provider ID, the table address, and the data address are stored in 
provider ID table 283 for every ISP, respectively. Although the table address shows the 



table address of the attestation server address table 285, the table address in provider 
ID table 283 currently assigned for every ISP is in common (the same table address), it is 
shown in the attestation server address table 285 for every ISP — each attestation 
server address storing is carried out. Provider ID is an index which identifies a provider. 
This is called for from a user name (domain name). Namely, the server controlling part 
281 of the proxy server 28 of drawing 2 , If an authentication demand packet is received, 
will extract a user name (domain name) from Program Data Unit (PDU) in the field of an 
authentication demand packet, and the user name decided beforehand will be made into 
an index, Provider ID, a table address, and a data address are acquired from provider ID 
table 283. And the server controlling part 281 accesses the attestation server address 
table 285 of the storage parts store 282 from the table address searched with provider 
ID table 283, An attestation server address is acquired by making into an index provider 
1 1D acquired on the provider table 283, and it asks for the IP address of an 
authentication server. Therefore, even if each provider's access point dialup number is 
common, it can distribute to the authentication server of the provider who connected. 
[0033]Next, the structure of search of the user datum of drawing 5 is explained. First, 
the server controlling part 281 of the proxy server 28 of drawing 2 , The data-address 
table 284 in the storage parts store 282 is subtracted from the data address for which it 
asked with provider ID table 283 of drawing 4 , and the table address of the provider table 
286 is acquired by making into an index provider ID calculated with provider ID table 283. 
Next, the server controlling part 281 pulls the provider table 286 which is in the storage 
parts store 282 by the table address acquired on this data-address table 284, A user's 
attribute (subdomain name in the field of an assignment request packet) decided 
beforehand is made into an index, The IP address of a member's terminal is acquired by 
searching a member IP address applicable from the user IP address pool which is an user 
datum, and the IP address of the default GW and the IP address of DNS are acquired. 
[0034]Next, with reference to drawing 6 , IAT explains the process flow to attestation and 
acquisition of each IP address using a proxy server. First, IAT22 makes provider ID 
introduce by transmitting an authentication demand packet to the proxy server 28, in 
order to discriminate the provider of ISP made into the purpose from the domain name in 
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the field of an authentication demand packet (Step S601 of drawing 6 ). In a proxy server, 
the address of the authentication server of ISP applicable from provider ID is recognized 
(Step S602). In a proxy server, the authentication server of applicable ISP is accessed 
and attestation is performed (Step S603). 

[0035]IAT22 will reply an operation confirming response (O.K.) to the terminal of 
********, if a success of attestation is recognized by the authentication reply from a 
proxy server (Step S604, S606). 

[0036]By transmitting an assignment request packet to the proxy server 28, if IAT22 
receives an IP address quota demand from the terminal of According to the 

structure of the user-datum search shown in drawing 5 , the IP address of the terminal of 
*****♦*#, the IP address of the DNS server of ISP, and the IP address of an access 
router are acquired (Step S607, S608). 

[0037]Thus, target ISP can be recognized not with a connected line identification but 
with the user name (domain name) and password of and an user datum 

required for ISP connection can be acquired from a proxy server (Step S609). 
[0038] 

[Effect of the Invention]As explained above, the 1st effect of this invention is that 
plant-and-equipment investment is reducible by sharing of IAT. The reason is because 
the number of equipment of IAT is reducible by sharing IAT between two or more 
providers. Therefore, since it is not necessary to prepare a yard LAN facility for every 
provider, cost is reducible. Since it is not necessary to prepare an access router for 
every provider, cost is reducible. 

[0039]The 2nd effect is being able to perform improvement in member service. The 
reason is because the member can access the Internet, without being conscious of a 
provider. Therefore, even if it has joined two or more providers, it is connectable with an 
internet provider by one dialup number. 

[0040]The 3rd effect is that a new business opportunity can be born to the career side. 
Since the reason is connectable with two or more providers from one IAT, the career 
side can provide two or more providers with the cheap Internet access business of cost. 
Therefore, since the provider side can also realize reduction of access servers, it 
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becomes possible to entrust an Internet access function to the career side. Therefore, 
the career side can create new business and can raise a profit. 



[Translation done.] 
* NOTICES * 

JPO and INPIT are not responsible for any 
damages caused by the use of this translation. 

"I.This document has been translated by computer. So the translation may not reflect the 
original precisely. 

2.**** shows the word which can not be translated. 
3. In the drawings, any words are not translated. 



DESCRIPTION OF DRAWINGS 



[Brief Description of the Drawings] 

[Drawing 1] It is a system block figure showing the outline of the Internet access system 
using IAT of this invention. 

[Drawing 2] It is a block diagram showing the composition of the function of IAT shown by 
drawing 1 , and an Internet access system. 

[Drawing 3] It is a sequence diagram showing the sequence of signal processing between 
the subscriber terminal of drawing 2 , and an ISP provider. 

[Drawing 4]I n the proxy server of drawing 2 , it is a schematic diagram showing the 
mechanism of searching the address of an authentication server. 
[Drawing 5] In the proxy server of drawing 2 , it is a schematic diagram showing the 
mechanism of searching an user datum. 

[Drawing 6] IAT of drawing 2 is the flow chart which showed the flow of attestation and IP 
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address processing using the proxy server. 
[Description of Notations] 

1 1 Relay exchange system 

12 IAT module 
15 HUB 

17 Relay data network 

18 ISP1 provider 

19 ISP2 provider 
22 IAT 

28 Proxy server 

101 PSTN network 

102 PHS network 

103 ISDN network 

131,132 ISP1 subscriber terminal 
133 ISP2 subscriber terminal 
161,162 Router 

181 ISP1 authentication server 
191 ISP2 authentication server 

221 Modem 

222 IAT control section 

223 PPP termination function part 

224 IP address analyzor 

281 Server controlling part 

282 Storage parts store 

283 Provider ID table 

284 Data-address table 

285 Attestation server address table 

286 Provider table 
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[Drawing 2] 
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MMMt**>l6H] 

■fe-X^SKfiV^T^ mfffi-f b7*-fe*h9> 
^WL*^hZ- fc«:#«fc1-*7****w**JBv> 

fyfB-Y > * - * y h 7* :/nA4^-*» 

SrJBmfe-Y > * - * ? h7^^^Mo 
MM** 3] 1HE7 7****V>h 

A l ftWtT 9 •kAV-'iiFB^it't >9-*y hT9* 

^CrtlLfc^fAf-^ J: ■JllMB<* >9-*v h 
tRIf^^ > * - * 7 tf*:/n;\V ^-(7)DN 

xit«#t*£ k l, 2, ifctt 

3E*t07^*;*1fw<*fflV»fc>f >9--*y hT^-b 

V^e- hT*-kAifil4>fr — *-y VT9^^ Yy> 
?4iifc7?m-/Wfcr/^-*7 bT^ 
•b^Mt^ot, fyfS-f >^-^7f7^^F7> 
it— Stifc^ T^Tyy»*KJ: 9««[^>-Y V 
y h*- kf*:/n^M £7 t * 

#f tt^7^^^t-^^IV^^ >^-*7h7^ 

*)*-}>T9'kAiff 3 )'(>9-*y hT9*XYy> 
9*m)LtiT9*X*t— A*Jgv*fc>f >9-*v Y T9 

f-iy**^3BSE^w*oi PT K1/^?:MU it 
EBBE* w*fc7^-fe*LT BK * $ -£\ BBE:Wft 



2 

tt3tt0>fc I PT KV*<B3SR#***4 t> JDAti*K 

^O-ODNS^I PT KVXtJWIL, ffffi-f > 
* - * y fcf^yu/^ y-<D I PT KV**« *» 

St^rt fc»fi:t47?'fe^t- ^M^tz4 >9 

[0 0 0 1 ] 

-*^h7?'t^h?>*' (Internet Acc 
ess Tr unk : I ATtB^) 

[0 0 0 2] 

[f*OS«] -ftttKl^OI SP (Interne 
t Service Provider*. 4 > 9 — 

20 nf^»^fe**) tci* lot iz\±yak<nir4Tii>Ty7 

MX btlX^&o ^N7iV777m 
C 1 oifcli-Jft© I AT Wl 0 STfetLTV^o of 
9. I ATStt I S P»:i^at ^ttTV^ 0 Lfcrt* 
oT, IAT«#t4 1 J^-f7^^X RA 

s fc*i-)*Mfiwu i s p*^*s*ltv^j6o isinx 

mif, I SPfc*BLJ:3 ki-4l». RSi"*^^ 
T^r^^#-S-*Hi-*R***4o RAS«t6*;rt* 
IATIi, fcliifl5«^^tA[:^v^, :o 

*{f#^£iEIRLT;v~T->f v^-r^fctt^I AT 
30 IZ&titt&o IATIt PPP (Point to P 
oint Protocol) ftttfe. IATfi^ 
fAf-^ttHLTRStS I SPORIEt-A-j: 
8«f4o Sfcfc. BB*T*. ISPttftUnXtett 
LTIP7KV7. (IP: Internet Prot 
o c o I ) £»J !)S4o »iDA*#«0 I S P tcjfcRL 
J: ^ k-t*l»K:tt, §&1)\\A%te%}09 r <<t T )\/T y 7^ 

[0 0 0 3] 

40 J: -5 t*T4ISHl ffioT. I ATli I S 

P4fK*#J?3ftTK«SttT*iJ. IIUATiiLAN 
16t7^-fe^*M > hftO 7* KKiKS 

a6> I SPftJ:7?'t^^-?tItt4^K#*4o 

iOi^IATSfeliRASOJWi'SiL 
t^4v^;ft > +^ni:fcoTUSPi:io"CtR 

50 [0 0 0 4] *H?§<75IK)I±, 100IAT*Wfcoy 



(3) 



mm 2001-237892 



3 

[0 0 0 5] 

^ >iJ— l?^^n^>f 9-<DV*~ YT 9 
7<i>9-*y YT9*A Y- ? > 9 iffijitzT 9 

WS^f >9-*y YT9*AY S 7>91*. Wt-$ti?z94 io- 

7;v7'^fft:J: ■JttftO'f >-9--tr*:/ 
[0007] Kfc. trfar^-trx^Sfi. r^^^^-r 20 

[0 0 0 8] «rBT^-fe^#«tt. mifi^n^rv 

v >t-H^7°n;^ ^-tc©^1-^;v-^<7) I p r K 
DNStw^o I P T YVTs tmnA%L*m3i<V I PT 

[0 0 0 9] ifc. *3PJ3^i§ 1 0^>^-^7h7^ 

*«jtfc7**;**-'t*fl§v*fc>f YT9* 
^JfttioT, fufiM — YT9*A Yy>9 

ftiUv^o 40 

[0 0 10] Sfc. $P^(7)i2<7)>f V^-*^7* 
4r*;frffil4, -f >9-*y hV-HA-rasmr-iDV 
s e-YT9*A*ft 3 )<<>9 — *v YT9*AY7>9 
iffi^tzT 9 ttim^tz't >9*-*y YT9* 

^JfttioT, ltHB>f >9-*v YT9 J bAY7>9 

xy^tff^Betw^l PT Kl/**M»U itffiB 
EfEt"^t:7^^x LTBKtSlfi 1 **^ BIE3WSJ& 



4 

KXBf&8F * «K»im A*** fc X A fft ClttBlP A*« 
I PTK^HSMmi, inA#i»*fc« 
«9ST4 I P7 Ki^t^f Ft-^7'u^ 
^f-ODNS(7)I P7Kl/*i*W»U HUB* 

h fcf;* "/n/M ^— <7)I P7 KV**#JljM5 

[0011] 

%t>%>4 >9-*y YT9*AisAT&<D^m<DMmi 

mwi-&c hi a, «waM?wiAT^t^. 

iDA%£J&v*TA£^LTi3 0, PSTNS101 
(PHSlPlan Old Telephone N 
etwork) PHS1102 (PHSiPers 
onal Handy Phone System) 

ISDN1103 (Integrated Ser 
vice Digital Network) t> 
SSfty^fA 1 1 t, tlJUv^fA 1 1 £BMfcS*i 
fct^^>^-^7h7^-b^f7>'^ (I AT) * 
I AT^va-iV 1 2 ( I AT : Interne 
t AccessTrunk)t, W$L<0 I ATfrb<D 
(1 0BASE-T) t**Uv^HUB 1 5 

6 1, 162i, 7^Wt-;^*«6^n*y-t- 
A2 8^ -f >9-*y YO^-lfA&ftd I S P 1 ~f 
n;^/-18^ -f tf^Srfi 1 3 I 

5 P 2 /n;^f- 19t, ^.-^fBSE (aC*7- 

<D + z-v9) *ff^ISPl7°n;^f-l8(7)ISP 
llgfiE*9-wU 8 1i> -x—FBlE (;U7-K»Of 
^y^) *tr^ISP27°n;NM ^19<^ISP2i 
BE*- 9 1t, 162t, ^-^1 

6 1 t I S P 1 ~fu/*4 9-1 8 43*0* I S P 2 7 P DA 
>f^-19^88tS*If-^||17t, ISP1 
7°n;^ l 8 kjgfcLTV** I S P 1 38* 13 1, 

1 32t, ISP27*n;\M^19i^LTV^I 
S P 2SnA#«*l 3 3 £*6*JflS3*LTV»* 0 

[0 0 12] in:^T, 7*-fe*#<f>> 

14. 4>IJJ|y^TA 1 1 IAT^ya-jvn 

HUB15^ ^-^161, 162t> ro^y 
-t^2 8i*^tv^ 0 tfc* PSTN8101 
14 1 SP linA*«*l 3 1 t^«2fcSlv'^T-A 1 It 

*mwt-tz>mmmx~hV), phssi o 2*41 sp isn 
a*«*i 3 2^»>^fA 1 1 1 *sai-*a 

flMH-C"* *J > I S D NIB 1 0 3 \±, I S P 2 iDA#«* 
1 3 3 i^iv^fA 1 1 t ^g^i-^>affi«T** 

[0013] I A TM 1 2 W\ tt^<7) I A T 2 2 T-«* 
Stt^ IAT 2 2 - 1, 2 2 - 2, • • 
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2 2 - n ft- -So 

[0014] III 1 *#fl?.-r^> t > I S P 1 iJPA#*§* 1 

3 i iffimL-x^&ijax^&y J T)vr (I S 

P 1 •/n^M ^- l 8 t I S P 2 T^n/M l 9 CD* 
1 1 <0#ffivr#TKJ:o-r, I A 

§^ J c^;V^*ftti , '-e<75-?- J r^^^iS^1-^ I AT 2 2 

izmm-rz, 0 ttz, mwcomx^hm-^^r^Ty 

CoMoy^f -YJi/T ^ 7°#^(41t8fccDii]ijgi£^o<ft 
Sv^TV^ I AT 2 2 ^#«-r«»o 3 fcfcfcaScO-T'n;* 
SiiCioT, #-9-e^v^rv^ I AT 2 2 K» 

tizxx) «Hg-*a mm * tz itmm * m %> wv- § & „ 

[0015] 3raA*<Z>*S*#> <b <7)§»i4, I A T 2 21* 
ftKLT*&*T ! 'A£jjl-CP P P (Point to 
Point Protocol) ifcUffix, I 

at 2 2\±mux%<r>mm. (Mx^ouMMfrbxjjzti 

l*HCf£SLT*&yn3rv-~-9--^2 8 KfmP^L AN4 

[0 0 16] i^Btyn^f 8-CJ4, ttlS-f 
& I SPSr^mLK^i"* I SP^itLT^IES*?-^ 

CDIPTKV^, ISP©DNSt-^©IP7KV 
r^-t^;v-^ 16 1) OIPTKV^^ 

m» Lmux^i&m-r & = 

[0 0 17] B2*#lt4t, IATM12rtO#I 
ATO«#6ff|j&III£StLTV>.5> 0 1"&;b*>, [H2£;^ 
T, IAT2 2li, 2 1 t> KLrv^iV^ 

u-ty-y-izx *) y'x2>r*7 2>,mmx~m¥z-rz> i ATf&was 

2 2 2 i*«S?M. I ATftlJ»lf|52 2 2(4, PP 
YHmmmU2 2 3 t> IP7K^MI52 2 4 i* 
^#^^ft* 0 

[0 0 18] 1C> E12 K^T, /D^->-t-M2 
8(4, El^Lrv^^v^n-fe^^^J: 19 7°n ^ A*IJf4P 
T~IM^1-&*-Aft«ffl$2 8 1 £, W^ffiLisi^i 
"C l-^fAT'-nfettti ffi'IS«$ 2 8 2 t* 

77'r>a^*iJ ^CDTFS * 'J , R A M^OifH 

#?*oT'4Av>, 8E'HfflS2 8 2 K(4, 7°n/M ^- I 
Dt--/;V2 8 3 i, KVX7-7>2 8 4 

fc> BSE-fl— A7 KV^f-7*;V2 8 5 i, ^C07°D 
AW ^-x-^^2 8 6 k v*-f Af-? 

LT^So yn/^ ^-7-7*^2 8 61*, -fx*>*4 7 



6 

^hGWOIPTKl/^ (GW:y-b>>x-n 
LTv^t-*7^;v h GWT Kl/^f-^i'JTJ:, 
I SP<?)DNSt-^ (DNS : D i s t r i 
buted Name Service) OIP7KV 

inA#<o^*oi pt kv* *iraA#i ptk 

^7*-^<Di'J T t^C?1ifiK$ft.So 
[0 0 19] 4*3, ynA/fjr-Ciom 

10 ^-t-7'*2 8 6 K(4, I SPttCf7*;VhGW7 
Kl/^f-^xn^ I S PttKDN S T KV^ 

oxvrt, I SPmKMAmi PT Kv^y-;i/©x 

[0 0 2 0] 4i5, I A TtUUW 2 2 2 14, *fA 2 2 

1 £^LT<0'«t3dft>'.X'r a i i t cD^Sif *fr *) tz 
a&GDl|jFLTV>&V>ji£^§iaS§fc, HUB15tOSS 

4fc, if— A«MH»2 8 1(4, ;v-M6 2t©S 

Sflt * ff 3 t r v»as5&fliiaB * « *. t v> 

20 S„ 

[0 0 2 1] #CK, 112 4-#P.LT, *%m<DW)ft<Dfflk 

m*m.mi-&o mx^o^ («-ci±, i sp i*da^ 

flMcSfcli I S P 2l)QA#SS*) frb<D%>m*, I AT 

2 2 KrtraLT&S^T'A 2 2 1 ^SffiL-T I AT$W 
g|52 2 2 CKftStiSo AlA****^ I AT$lJ«ffl52 
2 2 ^(Dmmt. PPP7*d h n;HC*-^v>Tlf fc>ft 
& o I A TftllfPSB 2 2 2 CD P P P i&jSMlteSB 2 2 3 **JD 

A#**t ppp/nh =i frizm-j^tzt&m&ft -5 o * 

PPP (Point-to-Point Prot 
30 ocol) li, RFC1661 (RFCiReques 
t for Comments) K <fc oTltJtl, I 
ETF (Internet Engineering 
Task Force) CioTl$ft?tLtV^o f 
<D%t, I A TttfflW 2 2 2 f±, I P T K V^ftffiU 2 2 
4CI4IP7Kl/^m ffiLAN^gfiLT 
(HUB 1 5 i5 J: $16 2 Jftfi LT) /n^fy 

-t-/<2 8i:gStS» i«0B#, 7°D + y-t-A2 
8 0t-^*W»2 8 1 i±, »ttlA#0|gfti-4 I S P 
Oi— ifife (K^^v«) *»e>»^i-* I SP*r|ISll1- 
40 s 0 Ii:, -9--/^ftiJffll«|5 2 8 1 t±, I SPOx-f« 
(K^'f >i&) *»^>SE««I5 2 8 2 Cft|fl?itTV'4 7*n 
AW ^-f-7'JV2 8 -6 OBIE-9--AT KV^x'J 
bmm-fZ ISP (ISPl 7*n;M fett I S P 

2 yn/txf ^--) w^SE-9--AWT Kl/X411tl.o 
-e-om, -9— ;<MHf2 8 1 14, I SPUJJL 

rBBES**»m LBIE*3)tff+4o fMI^T LfcO 
*>I AT 2 2 CO I A TfWMuB 2 2 2(4, »JjpA#i»*0 
IP7FVX^7ndf 28i Olfii: i "9 #J «J 

50 [0 0 2 2]fil P7m, DNSt-^OI PT 
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Kl/X, *iU t f7*A'hGW<9IP7F^*7'D + 
v— 9— 2 8 ^JR^Ltf: I AT 2 2 <D I AT«»fflS 
2 2 2f4. i^feOf*-^*»ftlA#tCigfllLT, 

(4, f7*^>GWOI PT KV-Xi l 6 li 

[0 0 2 3] I1-B6 *r#JHLT, 

oflr-g-iaaoi/— 5->^*SEfcLTv»4 0 4-. ispi 

yn/^ ^- i 8 J:|g*&Lrv>-2,§liinA#* s -7 0 n/NM ^ 
'-«fitM V<DT*"te**f?-5fcJ<>*::* IS 

p i snA^s* i 3 i *«fflLT^r^r?yui: 

-f£t, Pf»seR*36«P STNffll 0 1 U i W f 4>tt^» 
v^T-A 1 1 £@fiLT, I ATtVa-*l 2 <D I A 
T 2 2 Cfftio -tZt, 2 2 1 S^LTSf 

L/c I A T*U«g|52 2 2tt, ISPI JnA#«* 1 3 1 
tPPP 7°n f ruWcH-cJv^TtSHf v», I S P 1 Jjp 
XmWiM \ 3 1 b I AT 2 2 fcRB-CP P PlCfc* >J V* 

(12 <DV >?Wlt£2 1 3) ^Hjl^JiS (I3<Dy- 
Jr>X 301-30 6) o 

[0 0 2 4] JnA#*>t>OP P POifcSSft, #&*DA#0 
ISPI iuA*** 1 3 1 i DP P PBSEK* (-3.— 9* 

1 D is J: ^ 1^9- KS-#iD) ^ffi^ttS 

^3 0 6) o iSEI*S-§f Lfc IAT22coiATftlJ 
»SB2 2 2f4, IP7l f W«2 2 4t*Ui-fI 
DiSi^^^- KfcfHtrfcP P P<9BSES*>"?yy h 
(EI 2 (OKIES* 2 0 1 ) *T?-kA#4 >hft<0-7xi 
*y-t-^2 8t:SffltSo £<0»<d\ IP7KW 
*5.2 2 4 14, ISPI JDA#S* 1 3 1 fl^fcifrttfcT 

^-trx^-r > hcDmm^^m^Lx^^^mmM (i 

feIP7K^#I»§iiTV^) yn^-> 

■9--^ 2 8©i P7 Ki^^*jftmi-^o -e^aaiLTt i 

P T Kl/^tffi^T, I AT*U»«2 2 2 14, SIES* 
t<*v hfcffcftU ynt*/- 9— ;*2 8jBfcjaHr*-* 

[0025] tit, HUB 1 5 , 2gfif 
$«L£rn3r->-9— -;*2 8 <£>-9->>"?f&WfflS 2 8 1 
(4, I AT 2 2 4 *}&btlX%1zWmm$V<*-9 Y (EI 

2 (DWMMifr 2 0 1 ) <D7 4 -fr } f Pil,Z$ > &3.-y t %,js 
±^ISPOF^^>iS*I^, 0 4lc^L^KBE-9 

-^oiprmw (ma) icsiox, tit^i 

S PCD^|E-9-/t(7) I Pr (^©^ ISPI. 

^BE-9"-^ 1 8 1<DI P7 Kl/^) 
>*3 1 8) o Mic, 9— 2 8 1 (4, KfE9— 

A©lP7KWKfot, titSISP (ISPI 
7»d/nM^-18) KBER«;^7F (H-2 0BiE5f 
*2 0 2) ^mm-r-S 3 2 7) „ 

[0 0 2 6] ISP17"n;>Mf-18 ttBffiS*'** 
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? f-ri*** ISPI 7*d;^ ^- l 8 K«b3 ISP 

1 ISKE9--^~ 1 8 1 izmwEM^tr v \ imto I S P 

8 1(4. mUW$f*try IPUZ&&3-- 

■—9*1 D4S4^^7- mmLX^^r- 

?'<-xizmfom! l z&a--*fmi l z&mz}tr^2>a--if 

y h b LTM L, ISPI yn/^ ^- 1 8 
io lft-ey*D+vt-A2 8 ICjgftl-So ISPI 7°cm 
I'^-l SfrfeOBKtffcTtk* 7°n#v-9— ;*2 8 

(D^-^mnu 2 8 1 (4. mm.fc&^'r ? v & i at 2 

2 -7 h £§{1 Lfc I A T 2 2 
<D I A TmmU 2 2 2 (4, ISPI JDA#«* 1 3 1 K 

P P PMMfc<&*Misir& 3 2 8, 3 1 

9, 3 0 8) „ 

I0 0 2 7]t*t, I S P 1 inA*Sro* 1 3 1 (4, I 
P7 KU^SlISS** I AT 2 2 (v-$-> 
^3 0 9) o IAT22WIA TSOffllgP 2 2 2 # I P 7 
20 Ki/^«>)StS**5iLft4*)tf, S'lSTR*^ 
h*yn + ->— 9-/^2 8 KitHg-tS 

3 2 0) o 

[0 0 2 8] i" * b, -fv* 9-/t2 8©t-ni 
ffllSP 2 8 1 (4, m 5 Lfc 4 3 jl— 9*t»- 

<Di±m& (112) tct^oT, %snA#o i s p i dda# 

g*13 1WIP7KW, ISP©DNSt-A©I 
P7FW, 4340 f T^-b^;V-^O I PT KU-^^^X 
f# L, l§SDA#<0 ISPI iDA#«* 1 3 1 
(v--^>^ 3 2 9, 3 2 1, 3 1 0) c 
30 [0 0 2 9] IkK, I AT 2 2 «0fMfPg|$ 2 2 2 (4 I S P 
m&ffli&om^i* ISPI •/D/t-f 1 8 tC^itii-* 
t> ISPI 7'D/q ^- 1 8 t4 I S PH&H%j&&* 

tf&LffitbZ (v--^>* 3 2 2, 3 2 3) o 

[oo3o] -j, i pt Fisxmmomtozgnt: i 

S P 1 *nA#S* 1 3 1 (4, ISPI yn/NM fT- \ 8 
?rgftLt'fv^-^7 h bmm *ik*>hZ- b izttZ 
(~>-l->X3 1 1) o ^^T, mA#**I SP 1JPA 
3 1t^>^-^7 h^oa#Sr*T**, m 
40 ^«J»fi-St. ISPlJ)DAfS*131iIAT2 
2i©'J yftfWKZti, ISPI 7d;\M^- 1 8 <D 
»iJH#WLv IAT2 2(?)F7>^A>Fi«ii 

(v-^^3 1 2, 3 2 4, 3 2 5, 3 1 3, 
314, 316, 317, 315) o 
[0 0 3 1] a_h, ISPI tJDA^Sst* 1 3 1 j > 

YiTf-tX-f&Wi&iz^^x^ UmLtztf, 
ISP lftlA£Sft*l 3 YZTf-t 

* Ltzm-ki>, PHsii o 2 *jn,xmmi?f $&i± 

it -9**, I AT 2 2 434D f 7 0 n^v--^- / ;t2 8<OW)ft 
50 #WCT**£i:J±W^* tr«>4v» 0 i 7t, ISP2iP 
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<£ o tc N ISP27°n;^^i9^J;(;iSP2 BfE* 
wq9U«U I SP 2iDA#**l 3 3A*I S 
P 2 7°n/M ^- 1 9*frLX4 >?~^y h tMlm* 

[0 0 3 2] mA<D I S 

-V^V 2 8 3 Cti. ISPfe 7 P n;M ^-ID^ 

l/^r-7>2 8 50f-^T KV*£r^LTV*£ 
^\ 7°n;^ I Dr-7>2 8 3 \HK$>2> I S Ptt 
C#Jty#ttkftTv>&y--:/;i/7 KV^Wl (H— O 
f-7>7Kl/^) -C**o BiEiJ— '*7 KWf-^ 
iV2 8 5 fctt^ I S P4fK*&#B5E-9--->^7 KV*» 

8^-9— ^«»» 2 8 1 14. WMW^^ry ^^ 
£flr*&i:. jl— 9** (K>>f v*) tBIESM*'**? 
h07>f-^Kflt:**P r ogr am Data U 
n i t (PDU) *5>«IIHU *fe*t«6ft*5>*LTV^ 
&ji-Hf*S:^ >f7^Xi It, 7°n/^^-IDt 
-y;l/2 8 3 ^7°n^M^- I D^f-7>7 
tf-?7K^tt*Ht4o Its -9— ✓tflMJUlUB 
2 8 1 7°u/nM I Dt-7>2 8 3 T?4fe§SLfc 
f-7>7 KV***fcE«»2 8 2 0BBE-9— ^7 KV 
2 8 5 £7^-tr.x U t/n/t>f jr—T — ^^ 
2 8 3 T\^#L£-7 0 u^ /-iD*>f Vf^^^t L 
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